Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/27d7ba7b-aeba-472c-8558-d38924dd8a0f.cer
File:                     27d7ba7b-aeba-472c-8558-d38924dd8a0f.cer (raw, json)
Hash identifier:          JnpYxXbjsVH1N2W4uCb38bBCXZKXk1EqbxNuP/vM6hw=
Subject key identifier:   3C:6D:4C:17:8A:C6:96:FE:89:5F:93:60:F2:22:39:36:B2:BB:98:9B
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F4328584633096CAEFC7D36C280F07580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/27d7ba7b-aeba-472c-8558-d38924dd8a0f/27d7ba7b-aeba-472c-8558-d38924dd8a0f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/27d7ba7b-aeba-472c-8558-d38924dd8a0f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 13 Jun 2024 17:18:14 +0000
Certificate not after:    Wed 16 Sep 2026 17:18:14 +0000
Subordinate resources:    AS: 398372
                          IP: 198.153.255.0/24
                          IP: 2605:7140::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:33:09:6c:ae:fc:7d:36:c2:80:f0:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jun 13 17:18:14 2024 GMT
            Not After : Sep 16 17:18:14 2026 GMT
        Subject: CN=27d7ba7b-aeba-472c-8558-d38924dd8a0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ee:a1:dd:51:6f:a7:50:30:1f:11:76:8d:19:
                    6a:00:e6:11:0c:f3:34:ee:f6:ec:83:59:90:4a:43:
                    5d:0d:ee:cf:80:fd:ea:29:4a:f3:67:e4:24:02:8f:
                    04:d9:5e:0f:24:5b:5e:1c:52:6d:ad:b7:75:c0:bf:
                    29:c0:14:88:84:e0:29:97:e8:b5:5d:3e:6e:10:7b:
                    f9:7a:d9:44:ba:29:74:f9:17:2c:89:11:4b:58:07:
                    57:6e:75:35:6a:78:bd:bb:59:4f:23:84:b3:7e:5d:
                    73:8a:04:80:39:1f:43:91:f0:5b:dc:f8:3a:9f:09:
                    ad:b5:19:59:16:37:78:6b:67:36:50:90:a0:79:fa:
                    3b:77:33:1e:e4:e6:d8:32:c8:35:5d:d3:de:69:ac:
                    a6:fa:4b:a4:2b:e0:f5:f5:a0:fe:c4:b0:12:96:59:
                    9c:78:ff:bc:d2:04:a0:99:6c:82:5f:44:56:91:cc:
                    fe:10:ce:74:6d:ce:59:7d:b5:88:57:7f:67:f8:13:
                    c3:ff:04:4b:67:a8:ec:af:74:45:4c:bf:f4:58:13:
                    af:62:ce:67:76:3e:4b:3b:84:49:60:7d:76:48:9b:
                    aa:75:3e:78:17:5c:8f:fa:bd:ec:e6:c3:cb:6a:24:
                    a5:65:38:15:ad:3c:aa:f8:ee:ec:51:0e:67:5e:5a:
                    06:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:6D:4C:17:8A:C6:96:FE:89:5F:93:60:F2:22:39:36:B2:BB:98:9B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/27d7ba7b-aeba-472c-8558-d38924dd8a0f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/27d7ba7b-aeba-472c-8558-d38924dd8a0f/27d7ba7b-aeba-472c-8558-d38924dd8a0f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.153.255.0/24
                IPv6:
                  2605:7140::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  398372

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:59:e5:df:cf:bc:55:02:e0:a3:a8:7f:fe:b4:77:7d:97:db:
         b0:3a:b8:93:59:29:97:13:83:06:45:bf:f5:de:09:d8:bd:8e:
         00:65:0a:9c:43:81:c8:66:64:0f:87:9f:4a:1a:25:a1:16:61:
         4b:89:b3:16:2d:d6:d1:48:0d:8d:ac:5a:8e:13:76:cc:5c:10:
         79:5f:89:be:32:f6:a7:90:00:2d:39:a3:ab:61:ed:e4:c7:e8:
         dd:e4:0a:67:9c:e6:79:e3:fe:9d:49:82:28:93:3b:5d:8e:1d:
         5f:47:7c:5a:a2:14:8d:ca:e1:21:04:67:9c:cf:4e:7e:3c:42:
         ba:99:83:74:ce:3e:a5:9f:41:ef:76:8f:ac:dd:fc:94:e6:25:
         45:d1:8a:3a:86:44:8b:c2:b6:98:be:64:7f:d2:fe:0f:1e:60:
         7d:98:1b:fb:36:f1:c3:c3:82:55:69:e3:79:71:28:78:63:f3:
         41:a4:cb:f0:10:48:47:e0:75:76:0d:de:cf:05:b3:f0:8d:ee:
         03:9a:38:22:4d:ff:e2:88:2d:ea:48:3f:9a:73:78:69:fb:f5:
         a6:b3:a0:6c:bc:4d:dc:e1:36:fb:17:e9:9d:13:d0:3b:58:54:
         41:3d:af:fb:93:b8:81:27:1b:b6:39:5c:e1:44:ea:84:5a:8d:
         fc:55:be:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----